Description
The mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 truncates e-mail messages at the first ASCIIZ ('\0') byte, which might allow context-dependent attackers to prevent intended information from being delivered in e-mail messages. NOTE: this issue might be security-relevant in cases when the trailing contents of e-mail messages are important, such as logging information or if the message is expected to be well-formed.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T13:06:26.101Z
Reserved: 2007-03-27T00:00:00.000Z
Link: CVE-2007-1717
No data.
Status : Modified
Published: 2007-03-28T00:19:00.000
Modified: 2026-04-23T00:35:47.467
Link: CVE-2007-1717
No data.
OpenCVE Enrichment
No data.
Weaknesses